Security optimization platform company AttackIQ Inc. announced today that it has acquired risk intelligence and vulnerability management solutions startup DeepSurface Security Inc. for an undisclosed price.

Founded in 2017, DeepSurface offers a security posture management platform that contextualizes vulnerabilities and attack paths within an organization’s digital infrastructure. The company’s platform allows cybersecurity teams to predict where attackers could inflict the most damage, allowing for more effective risk mitigation.

DeepSurface’s platform automates vulnerability analysis by collecting and evaluating more than 50 attributes of an environment to provide a holistic view of potential security risks, allowing for informed decision-making. DeepSurface says its advanced analytics identify realistic attack paths to connect the dots between vulnerabilities, access rights and critical assets, allowing organizations to understand the downstream impact of potential exploits and prioritize remediation efforts accordingly.

The platform also offers what the company says is high-quality executive reporting for clear communication of remediation efforts, goals and progress to stakeholders. Additionally, it provides actionable remediation plans, breaking down issues by the system owner and creating tasks with easy-to-understand instructions.

DeepSurface’s security posture management platform will be integrated with AttackIQ’s Breach and Attack Simulation Platform to allow organizations to predict where an attacker could cause the most damage. The combination of these two capabilities will allow AttackIQ customers to easily validate if critical assets are effectively protected by the customer’s cyber defensive infrastructure.

“Security teams are inundated with exposure noise, all while the frequency and severity of bad actors are increasing exponentially,” said AttackIQ Chief Commercial Officer Carl Wright. “The need to generate true risk insights from security data has never been more apparent.”

CEO Brett Galloway, meanwhile, added that the “acquisition enables us to rapidly extend our traditional breach and attack simulation use case to now include Adversarial Exposure Validation and help organizations programmatically pivot to Cyber Threat Exposure Management.”

Coming into its acquisition, DeepSurface had raised $5.5 million over three rounds, according to data from Tracxn. Investors in the company included Differential Ventures, Osage Venture Partners, Ginossar Ventures, Peninsula Ventures, Ideaship, Cascade Seed Fund, Voyager Capital and SeaChange Fund.

Image: DeepSurface